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m THE CLAIMS 

Amended claims follow: 

1 . (currently amended): A system for distributing portable computer 
virus definition records with binary file conversion, comprising: 

a structured virus database storing one or more vims definition records, 
each virus definition record comprising: 

an idejxtifier uniquely identifying a computer virus; 

at least one vims name associated with the computer virus; 

a vims definition sentence comprising object code providing 
operations to detect the identified computer vims within a computer system; and 

a virus retnoval sentence comprising object code providing 
operations to clean the identified computer virus from the computer system; 

a Client database engine storing at least one iipdated virus definition record 
into the stmctured virus database indexed by the identifier and the at least one 
virus name for each virus definition record; 

a converter converting the virus definition records stored in the stmctured 
virus database into a virus data file comprising vims definition setSj each virus 
definition set comprising: 

binary data encoding instructions to detect the computer vims 
within a computer system, wherein the instructions con^mse the object code to 
detect the identified computer vims; 

binary data encoding instmctions to clean the computer virus from 
the computer system, wherein the instmctions comprise the object code to clean 
the identified computer virus; and 

names associated with the computer virus; 
a client anti-virus language decompiler converting each vims definition set 
in the virus data file into a virus definition record: and 
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a server database engine comparing subsequently modified versions of the 
structured virus database to form a delta set of virus definition records, wherein 
the ch'ent database engine stores the delta virus definition records set into the 
structured vims database; 

wherein the server database engine builds the virus definition records into 
the structured virus database by generating the identifier for each virus definition 
record and populating each virus definition record with the virus definition 
sentence and the virus removal sentence for the computer virusi 

wherein at least one of the dat abase eaeinett accesses tha vims defiTiitinn 
lecords in tiie structured virus database to perform at least one of addm^ . 
removing, and replaci ng a virus definition record 

2. (cancelled) 

3. (canceled) 

4. (cancelled) 

5. (previously presented): A system according to Claim 1, further 
coftipiising: 

a server anti-virus language decompiler converting each virus definition 
set in the virus data file into a virus definition record. 

6. (cancelled) 

7. (original): A system accordmg to Claim 1, finther comprising: 

a compression module compressing the struchired virus database prior to 
transfer; and 

a decompression module decompressing the strucnired virus database 
subsequent to transfer. 
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8. (origrnal): A system according to Claim 1, furthier comprising: 
an enctyption module encrypting the structured virus database prior to 

transfer; and 

a decryption module decrypting the structured virus database subsequent 
to transfer. 

9. (original): A system according to Claim 1, wherein the stnictured 
virUs database is a relational database. 

1 0. (currently amended): A method for distributing portable computer 
virus definition records with binary file conversion, comprising: 

storing one or more virus definition records into a structured virus 
database, each virus definition record comprising: 

an identifier uniquely identifying a computer virus; 

at least one virus name associated with the computer virus; 

ti virus definition sentence comprising object code providing 
operations to detect the identified computer virus within a computer system; and 

a virus removal sentence comprising object code providing 
operations to clean the identified computer vims from the computer system; 

storing at least one updated virus definition record into the structoi-ed virus 
database indexed by the identifier and the at least one virus name for each virus 
definition record; 

converting the virus definition records stored in the structured virus 
database into a virus data file comprising virus definition sets, each virus 
definition set comprising^ 

biaary data encoding instructions to detect the computer virus 
within a computer systeDoo, wherein the instructions comprise the object code to 
detect the identified computer virus; 
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binary data encoding instructions to clean the computer virus from 
the computer system, wherein the instructions comprise the object code to clean 
the identijfied computer virus; and 

names associated with the computer vims; 
com^>aiing subsequentiy modified versions of the structured virus database 
to fonn a delta set of virus definition records; and 

stoting the delta virus definition records set into the structured virus 
database; 

wherein a clien t anti-virus language decompiler converts each virus 
definition set in the virus data file into a virus definition record: 

wherein a server database etigine builds the virus definition records into 
the structured virus database by generating the identifier for each virus defmition 
record and populating each virus defmition record with the vjuus definition 
sentence and the virus temoval sentence for the computer virus; 

wherein the s erver database engine accesses the virus definition recoids in 
the structured virus database to perfbnn at least one of adding, remnvinp;^ atiH 
replacing a virus definition record . 

11. (cancelled) 

12. (canceled) 

13. (cancelled) 

14. (cancelled) 

15. (cancelled) 

16. (original): A method according to Claim 10, fiirther comprising: 
compressing die structured vims database prior to transfer, and 
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decompfessing the structured vmis database subsequent to transfer 

17. (original): A method according to Claim 10^ ftjither comprising; 
encrypting the structured vims database prior to transfer; and 
decrypting the structured virus database subsequent to transfer, 

18. (original): A method according to Claim 10, wherein the structured 
virus database is a relational database. 

19. (original): A computer-readable storage medium holding code for 
perfotming the method of Claim 10. 

20. (currently amended): A method for updating a binary computer 
virus data file from virus definition records stored in a structured virus database, 
comprising: 

means for storing virus definition records into a structured virus database, 
each virus definition record comprising an identifier, at least one virus name, a 
virus defixiition sentence defining operations to detect the identified computer 
virus, and a virus removal sentence defining operations to clean off the identified 
computer virus; 

metos for comparing ^bsequently modified versions of the structured 
virus database to form a delta set of virus definition records; 

means for storing the delta virus definition records set into the structured 
virus database; 

means for converting the virus definition records stored in the structured 
virus database into a virus data file comprising virus definition sets, each virus 
definition set comprising binary instructions wherein the binary instructions 
comprise the object code to detect the computer virus, binary instructions wherein 
the binary instructions comprise the object code to clean off the computer virus, 
and names associated with the computer vims; 
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means for comparing subsequently modified versions of the stnictured 
vims database to form a delta set of virus definition records; 

means for storing the delta virus definition records set into the structured 
virus database; aad 

means for building the virus definition records into the structured virus 
database by generating the identifier for each vxms definition record and 
populating each virus definition record with the virus definition sentetice and the 
Vitus removal sentence for the computer virus; 

means for converting each virus dcfinition_sc_t_in the virus data file into a 
virus definition record: and 

means for accessing the virus definition records m the structured virus 
database to perform at leagt one of adding, removing, and replacing a virus 
definition record> 
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